gbarry

You're going to need to use one of your back up codes in this case.  Google auth and other authenticator services are going to generate locally for your initial set up, and that set up only.  The error you're running into is because it's expecting to authenticate using the original token set up, and not the new auth tokens you're now attempting to use.  This is expected behavior for two factor--similar to what you would see with an SMS text message to a single device.

Quick thread update: for those of you looking for Ashley and his app CardDesk, which used to have a home in the mind mapping discussion here, it has been moved back to the third party applications area here: http://discussion.evernote.com/topic/51427-carddesk-a-visual-organiser-for-evernote/

Apologies to Ashley, he'd set up a thread originally over there and we a tad over zealously moved it over to the Lifestyles section.  Carry on, and feel free to say hi to Ashley over in Third Party App discussions.

D'oh!  I've spent nearly an hour hunched over my desktop and my laptop, trying to figure out why none of the SMS' sent to me have worked; I get "The code you entered is not valid."

 

I finally figured out what was going on; I had added Evernote to my Google Authenticator, and apparently that invalidates any of the codes I receive from SMS.

 

Couple of issues here:

- If signing in with SMS-sent codes is disabled by design when the user has turned on gAuth, then codes should no longer be sent to that user via SMS!

- Additionally, the language of the type-in-your-code prompt should be changed... if not personalized based upon the user's selected form of auth (SMS vs. gAuth), at least reminding the user to check for one or the other

 

Yeah, I'm absent-minded, clearly, but still... thanks in advance for considering these suggestions

Some clarification--the option to activate Authenticator or SMS is either one or the other.  Are you activating an auth account outside of your Evernote security settings?

I tried to enable 2-step authentication today. First try, I finished all the steps on that dialog by clicking "Continue" and doing all the necessary, but still saw "2-step authentication not enabled" once back to the Settings. Second try, it worked. Second try was done immediately after the first try.

 

So now the issue is, I always got two verification code in Google Authenticator. Could anybody from Evernote take a look at my account and fix it? I am assuming there is some "shadow" associated with my account during the 2-step authentication phase.

 

Thanks!

Bugs been filed and we're checking out.  Since you've successfully enabled Two Step,  you just need to delete one of them (the one that does not work) from your Authenticator application.

I tried to enable 2-step authentication today. First try, I finished all the steps on that dialog by clicking "Continue" and doing all the necessary, but still saw "2-step authentication not enabled" once back to the Settings. Second try, it worked. Second try was done immediately after the first try.

 

So now the issue is, I always got two verification code in Google Authenticator. Could anybody from Evernote take a look at my account and fix it? I am assuming there is some "shadow" associated with my account during the 2-step authentication phase.

 

Thanks!

This sounds quite similar to this issue: http://discussion.evernote.com/topic/44026-problem-with-two-step-verification-for-free-users/

I'll file a bug and get back to you.

A question: what happens when I change my phone number? 

I would definitely recommend resetting this prior to your phone number change, or using an app like Google Authenticator, which is independent of your phone number.

Additionally, we do provide the reset codes that should be generated and stored somewhere safely.

It's possible the video might not have fully outlined where to start--but yes, all of your security settings are available in your Evernote Web settings.  Glad you found them!  Full steps and process are here: http://evernote.com/evernote/guide/web/#8

Is this for US-based Premium users? I'm in the UK, and a premium user, but for all I keep hearing about it, I don't have it.

 

Thanks,

William

It's definitely available in the UK.  Is there not an option to turn on Two Step in your Evernote Web security settings?

I can't seem to set this up. I go to the security page where I have three choices of things to do. The last of which is to set up Two Step. The word "Enable" is in blue but unlike the other two choices, it does not operate like a link, no little hand or underline appears when I mouse over it. However, I can right click it. When I click on it, I am taken to this generic page: https://www.evernote.com/SecuritySettings.action.

 

The other two options result in pop ups. 

 

I am a premium user, on Windows Vista. 

I've seen this behavior and am checking into it, but the link should still work, even if the mouse over isn't registering it.  Can you left click the link regardless of it not reacting to your mouse over?

Btw, the only "bug" we're seeing related to Two Step at the moment is where a button during setup, usually the last "Complete Setup" button, stops working.  This is because the security area of your settings actually has a timer set for it (should be 10 minutes), and if that timer runs out during set up, you'll need to restart the process. I *believe* the timer starts at initial login to your entire settings area, so if you haven't been prompted for your password at the security area, you're sitting on that timer and may run into an unresponsive button.

If you'd like to check out past discussions around the topic, the main (older) thread is here: http://discussion.evernote.com/topic/35674-two-step-authentication-eg-via-google-authenticator-and-encryption/page-20

2 Step, Access History, and Authorized Applications went out with last night's service update, works on all the clients, and is available to Premium and Business users (with eventual Free user rollout).  You've been able to see access history for a while, and is available to all users.

The official post is here: http://blog.evernote.com/blog/2013/05/30/evernotes-three-new-security-features/

The Evernote community is a great resource for both developers and users looking for third party applications built in conjunction with the Evernote API. Developers are welcome to post information on their applications and recruit users to help test, and users are welcome to work with developers to help improve their products, provided that users should be aware of that there are risks associated with using any third party applications, including those that are in beta. Developers should NOT upload applications to the forums; instead, developers should provide a link to the location from which users may download or access the application. Guidelines for both users and developers regarding third party applications are as follows:

For Developers:

• All posts, including Developer posts, must adhere to the community’s general code of conduct. In addition, all applications must comply with the Evernote Terms of Service and the Evernote API License Agreement.
• Third party application information posted by developers to the forum must have an integration with the Evernote API, completed or actively being developed. Any application that does not have nor intend to build an Evernote integration will be treated as spam. The forum post should include an explanation of the Evernote integration points.
• Evernote is not obligated to endorse, promote, or share your posts with the community and beyond.
• We cannot guarantee that Evernote users will be willing and/or interested in testing your application. It is up to your team to seek and request feedback through social media and forum channels (but do not spam users).
• Developers should not use the Private Message system to promote or seek users unless explicitly invited to do so by a user.
• In certain circumstances and in Evernote’s sole discretion, when working with the Evernote Developer Relations team, we may at times endorse or promote a third party application or beta.
• Developers posting about their betas and apps must provide contact information for testers to provide feedback and support questions, including expected response times for user feedback (Example: “We will respond within X hours [or days] to any user feedback.”) Developers should take into account their available resources when giving this estimated response time frame.
• Evernote may remove a developer’s posting to the forum at any time.

For Evernote users:

• All betas and third party applications are considered "use at your own risk" and are not supported by Evernote Support.
• Evernote will not be responsible if use of a third party application results in changes in, modifications to, or deletions of content from your Evernote account. To ensure the safety and security of your content, we encourage all beta testers to create Evernote test accounts and to make regular backups of their Evernote data.
• Users who find a developer acting inappropriately or providing inadequate responsiveness to user feedback/issues should report any questionable activity to Evernote Support.

Thanks for testing out David! 

Just wanted to chime in that the team from Mohio is a legitimate group doing very cool things--please feel free to check them out.  We'll pin this up for a bit in case anyone is interested in trying.  Cheers.

Sounds like two separate issues--I'm hearing in the first paragraph that emails sent to your Evernote email account were never received in your Evernote account?

The second issue sounds like you're trying to email an Evernote file in gmail? The Evernote email tied to your account is for intake of notes, rather than emailing out. Could you clarify things a bit for us, that'll help us figure out the problem.

Welcome to the forums. It's a bit of a perennial topic round here, but tardis is on point. There are only three "levels" of traditional hierarchy within Evernote--Note, Notebook, Stacks. While some users move in the direction of a traditional file system (with lots of notebooks) you'll see plenty of argument in favor of a strong tagging/search/titling regime around here.

Personally, I have about 20 notebooks with only 5 I use regularly. The only stack I have is one for all notebooks shared with me. Which I am loving in the new V5 client. I think the combination of all notebooks, shared included, into one notebook area is one of the best facets of V5, and hasn't received half as much attention as say shortcuts.

Tags are not shared? Could someone confirm or clarify? Thanks for your help.

Tags are presently not shared. In other words, the tag structure of a shared notebook does not proliferate or become suddenly useable within your own tag framework.

For good reason, too. You wouldn't want a carefully manicured tag structure upended by someone else's shared notebook. We're working on ways to make tags more useful between sharers, though.

Alright, this should be fixed. It's possible you'll see your missing emails pop up, so let us know if/when you do. If they don't appear, try to resend the emails, but this issue should be fixed. Thanks all for reporting!

Flagging this internally and we're looking into it. Thanks for reporting--anyone else have any similar issues continue to drop them here.

Coming from a bit further back, the Enterprise was a less-emphasized problem space for Evernote, at least that's the impression I got from Dave E. My own take is (and was) that enterprise is going to want more involved sharing facilities; so long as the easy things stay easy, then that's fine. I do agree that shared resources ought to have the same capabilities as normal resource, modulo owner's permissions, of course.

And yup. I think this also flows well with my response directly above, in that the emphasis isn't on building a product for Enterprise, but building a better Evernote product by improving functions that are useful to Enterprise use-cases. If it sounds like I'm dancing, I'm not--it's an important distinction.

Thanks so much for this insight, Geoff. It would be great if Evernote staff would share their developing thinking (as you've done here) more often—not even or not at all related to concrete plans or projects in the works. I know you're not speaking for the company here, so we shouldn't take your "coming around" as a sign of what Evernote will definitely do in the future, but it's still really helpful and interesting to hear things like this from those of you on the inside.

To push a bit on this particular topic, again noting that I know you're not speaking for the company—well, are you speaking for the company in suggesting that at least some people at Evernote may be starting to take longer looks at enterprise clients and away from "the way we started out, as a personal service"?

Yeah, me "coming around" basically means I'll be looking for and monitoring and sending feedback along those lines to our product teams. Which they get anyway because they trawl these environs regularly, but it helps if I'm also running around flagging specific posts for their attention as well.

As for whether or not we're taking longer looks at Enterprise, we've been doing that in a fashion, specifically through group accounts. But, let me emphasize, this is Enterprise in a way that is still Evernote. Coming from finance, Enterprise is sometimes treated like an entirely different can of worms--different architecture, different systems, different products--than for say a similar B2C product offering. The emphasis, in our case, would be to improve Evernote (say, through better sharing administration) that benefits all users, with the added benefit being that better sharing admin is better for Enterprise as well.

BTW, there are plenty of serious users of Evernote who do not need sharing, so this is not a fundamental use case for these users. On the other hand, if you've been evaluating the market, then surely you've found some other solution, or are you disappointed in the entire market as well?

Well, probably pretty fundamental from an Enterprise perspective. From what I can tell Enterprise views aren't overly represented on here, for whatever the reason. A view I'm coming around to is that a shared notebook should be treated (from a feature parity perspective) like any other client. IE, if you can do X in a notebook, on any platform, you should be able to do that in a shared notebook. That's presently not the case, because of the way we started out, as a personal service, but the continuing interest from group accounts is making the need for administrative flexibility in the shared client more salient.

Definitely a good call, I do the exact same thing. We'll discuss. We're trying to organically grow discussion areas so they don't expand too quickly and without a decent level of activity and support. Plus we'll need to eventually figure out how to nest em. The categories are already getting a little long, eh?

And more specifically, Owyn's set up here:

http://discussion.evernote.com/topic/19676-so-linux/page__view__findpost__p__113271